Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7e/6a1808-6fb8-45c8-954e-d549695e433c/1/xGglzBDkwis4XEo3r5DzC2iBQRo.mft
File: xGglzBDkwis4XEo3r5DzC2iBQRo.mft (raw, json)
Hash identifier: MLpLaejdij7LjQcfZKmovg82OphB9oOYeno89/3vVlY=
Subject key identifier: 46:67:35:0A:2E:06:BE:D5:31:95:4D:8D:8B:72:7F:4C:4A:8B:4B:F6
Authority key identifier: C4:68:25:CC:10:E4:C2:2B:38:5C:4A:37:AF:90:F3:0B:68:81:41:1A
Certificate issuer: /CN=c46825cc10e4c22b385c4a37af90f30b6881411a
Certificate serial: 0198D54E5A8D69C5B364A588581FA8118DB0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xGglzBDkwis4XEo3r5DzC2iBQRo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7e/6a1808-6fb8-45c8-954e-d549695e433c/1/xGglzBDkwis4XEo3r5DzC2iBQRo.mft
Manifest number: 0723
Signing time: Sat 23 Aug 2025 05:02:18 +0000
Manifest this update: Sat 23 Aug 2025 05:02:18 +0000
Manifest next update: Sun 24 Aug 2025 05:02:18 +0000
Files and hashes: 1: xGglzBDkwis4XEo3r5DzC2iBQRo.crl (hash: 3pUFDAOmWgdPeG3EjTPdyh3aBC8p+Rb8yW2OUQdi7UE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7e/6a1808-6fb8-45c8-954e-d549695e433c/1/xGglzBDkwis4XEo3r5DzC2iBQRo.crl
rsync://rpki.ripe.net/repository/DEFAULT/7e/6a1808-6fb8-45c8-954e-d549695e433c/1/xGglzBDkwis4XEo3r5DzC2iBQRo.mft
rsync://rpki.ripe.net/repository/DEFAULT/xGglzBDkwis4XEo3r5DzC2iBQRo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:4e:5a:8d:69:c5:b3:64:a5:88:58:1f:a8:11:8d:b0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c46825cc10e4c22b385c4a37af90f30b6881411a
Validity
Not Before: Aug 23 05:02:18 2025 GMT
Not After : Aug 24 05:02:18 2025 GMT
Subject: CN=4667350a2e06bed531954d8d8b727f4c4a8b4bf6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:09:35:db:53:de:3a:87:f4:1a:33:dd:67:33:
5b:f5:c3:79:39:ab:38:ad:70:55:2c:67:e0:e7:fd:
32:4d:50:50:a3:d0:a6:c5:74:d1:a5:1a:6a:f0:d8:
e3:0b:c0:da:7d:05:53:bf:57:76:88:96:54:db:e5:
cd:7f:2a:4b:f6:94:d4:56:4b:6c:eb:a9:af:5e:8b:
eb:88:77:e5:80:54:c8:49:eb:80:31:e6:9d:86:90:
e8:95:ee:3a:b6:1d:f4:62:8c:ad:c8:21:3f:f8:ee:
cf:4f:d5:6b:a6:e0:c1:45:dd:15:2c:14:8f:39:77:
46:c8:50:d2:53:5d:0d:44:71:0d:f0:a9:da:1d:0e:
60:f1:7c:44:1d:2a:46:c0:a0:42:76:7c:af:c2:f9:
e1:ec:01:66:fe:6e:4e:8c:40:c1:11:26:94:fe:3c:
1f:5e:b3:74:e7:78:59:01:3e:f7:9b:3c:7f:60:7d:
45:ee:3a:c9:1a:1a:3d:a5:16:36:8e:f2:5f:0c:77:
3a:23:d7:37:19:5f:0c:1d:f6:88:53:35:2c:e8:3a:
03:3c:10:29:30:64:cf:89:68:c2:a7:2e:81:c0:8f:
46:a4:04:69:2b:e5:ab:0c:4b:20:65:97:b1:c6:02:
f5:b9:d5:8f:e3:4c:09:69:7a:c1:a9:e6:1f:32:09:
04:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:67:35:0A:2E:06:BE:D5:31:95:4D:8D:8B:72:7F:4C:4A:8B:4B:F6
X509v3 Authority Key Identifier:
keyid:C4:68:25:CC:10:E4:C2:2B:38:5C:4A:37:AF:90:F3:0B:68:81:41:1A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xGglzBDkwis4XEo3r5DzC2iBQRo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/6a1808-6fb8-45c8-954e-d549695e433c/1/xGglzBDkwis4XEo3r5DzC2iBQRo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/6a1808-6fb8-45c8-954e-d549695e433c/1/xGglzBDkwis4XEo3r5DzC2iBQRo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
28:71:42:75:e3:4f:15:57:b5:d3:e3:74:35:96:0f:d3:14:79:
46:30:47:fa:0f:5d:e4:1d:91:0c:44:a9:12:3b:6b:6c:e5:43:
e7:d4:07:e1:ba:58:6a:07:76:a3:9d:a8:3a:82:00:3d:92:60:
bf:07:a2:5a:dd:b6:81:bd:55:b7:f0:1f:2f:52:18:51:4e:bb:
cd:14:4c:61:5e:f4:9f:ba:99:dc:75:30:2b:4e:0f:cf:bf:9a:
5e:5d:ef:76:e1:eb:8a:22:e2:bc:25:19:86:bd:4f:65:90:79:
ba:4a:41:3a:ac:2f:36:7c:61:4a:2f:53:58:e0:90:3d:60:d6:
da:a4:9a:8e:74:e9:5d:d1:4f:ca:a0:f6:22:ff:e4:5d:49:c6:
40:3b:71:45:5d:bd:c3:ee:af:fd:18:eb:06:d1:23:10:2d:d8:
fd:cd:3c:81:23:43:b3:73:36:b5:d0:0e:b7:b2:84:09:f5:5a:
b0:d8:d0:17:0f:74:08:9f:37:6a:4b:c4:31:91:a3:60:f2:0c:
b3:8c:56:e9:1e:83:15:02:76:00:b1:31:b8:6b:c6:8e:cb:de:
7a:f1:da:d8:65:7b:e5:07:93:54:bd:31:d5:65:85:89:d8:bd:
c5:00:1f:9d:8f:a9:c3:0b:d0:8a:5d:a3:6f:2b:d2:ac:03:dd:
62:75:c9:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 11:33:55 2025 by rpki-client